Sub-processors
Last updated 22 July 2026
TruthLayer uses the following third-party providers to operate this website and the TruthLayer platform. Certifications are as publicly reported by each provider.
| Provider | Purpose | Data | Location | Certifications |
|---|---|---|---|---|
| Cloudflare, Inc. | Hosting, CDN, edge functions, analytics, anti-bot verification (Turnstile) | Form submissions (transient KV hold), IP addresses (rate limiting, Turnstile), cookie-free analytics | Global edge network (US-headquartered) | ISO 27001, ISO 27701, SOC 2 Type II (as publicly reported) |
| Zapier, Inc. | Lead routing — receives HMAC-signed form submissions | Name, business email, organisation, role, message text | United States | SOC 2 Type II, SOC 3 (as publicly reported) |
| Stripe, Inc. | Payments — platform customers only; card data is handled entirely by Stripe | Billing details of platform customers (never website visitors) | United States (global operations) | PCI DSS Level 1, SOC 1, SOC 2 (as publicly reported) |
| GitHub, Inc. | Source-code hosting | No personal data of website visitors | United States | SOC 2 Type II (as publicly reported) |
Platform customers are notified of sub-processor changes via the contact email list. To be added, or for any questions about this list, email karlambrosius@outlook.com.au.
See also our Privacy Policy for how website data flows through these providers.